
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/B2409F28DF9311EEBF6BC36DC4F9AE02.roa
File: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (raw, json)
Hash identifier: T7iH4j+Fs0YGxwpO3ni8JBNnOoaLWOu3l74C8nsVoAc=
Subject key identifier: B0:25:28:DF:2A:DC:8D:BD:50:60:16:0F:A4:1F:7C:4D:7F:69:78:4B
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 1082
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/B2409F28DF9311EEBF6BC36DC4F9AE02.roa
Signing time: Fri 08 May 2026 18:21:14 +0000
ROA not before: Fri 08 May 2026 18:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134584
IP address blocks: 202.58.140.0/24 maxlen: 24
202.58.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4226 (0x1082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: May 8 18:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fe299a-05aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:b9:02:41:81:d7:e5:00:db:46:e0:f6:33:
f7:fb:3d:2b:44:43:a5:d9:32:90:bb:d1:bc:68:5d:
03:96:e6:e5:83:bd:9b:37:72:3b:1b:52:93:eb:04:
42:21:90:7b:40:c1:12:ec:c9:24:0d:7e:e1:c3:33:
61:d9:dc:a1:93:eb:15:e0:70:ea:6e:dc:37:74:ca:
9d:96:0d:14:49:5b:e9:66:6a:68:33:6f:2d:7c:ce:
6c:8d:f4:e8:b4:24:09:2f:a7:38:d2:90:24:e9:35:
da:4d:af:70:07:e5:ce:11:a5:66:e8:26:db:71:ca:
4c:34:57:df:e1:e5:bc:84:18:f5:af:7b:f9:5f:45:
f1:fe:a3:d5:e8:f6:06:0c:b3:ac:c2:7d:e1:63:ca:
b8:74:c0:7a:f7:a2:d4:b0:8c:9f:26:dd:1f:c8:e1:
8f:d9:07:3a:a4:77:db:56:78:4c:92:0a:08:e5:5f:
7d:89:c1:c6:2e:2c:23:a8:13:0b:d1:2f:d4:c1:19:
c0:97:73:48:28:fd:7f:23:33:a3:26:54:f6:9c:7b:
da:cf:c0:2f:1c:b6:28:7a:15:d3:1e:fe:8d:1e:09:
f9:bc:48:76:77:a5:59:0c:cb:e8:ec:82:b0:b2:be:
be:b2:ac:f8:e3:17:60:10:42:84:93:5c:24:9c:3d:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:25:28:DF:2A:DC:8D:BD:50:60:16:0F:A4:1F:7C:4D:7F:69:78:4B
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/B2409F28DF9311EEBF6BC36DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.58.140.0/24
202.58.142.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0c:da:c2:4f:75:85:e8:41:7a:7a:dc:74:c6:39:1f:47:16:
8d:57:1d:1c:33:de:9d:35:50:86:10:4b:d8:91:70:6e:8f:69:
26:60:60:22:d0:9e:e7:b7:a2:48:fd:85:d8:d1:82:ff:82:08:
d6:15:77:bf:93:65:95:88:f1:b5:68:eb:4b:33:83:82:68:9a:
08:99:14:c4:86:3c:8d:39:bb:d5:15:48:8d:27:45:e9:8b:86:
08:19:c2:7f:57:11:00:ee:a5:d1:0d:c7:81:23:46:10:fd:5a:
8f:7e:70:1e:b1:6e:f0:28:17:66:a5:02:62:73:92:4f:ce:af:
40:5b:17:4f:c2:6b:a0:cb:1d:7c:1e:e5:d9:b6:3d:61:cb:4c:
8c:e5:c9:16:2a:0a:33:ec:cf:d6:a1:a3:4e:0f:3d:56:f4:7a:
3f:e6:c4:67:79:01:16:7f:b5:c6:59:53:1b:ff:fe:85:a6:5d:
56:92:38:c3:08:07:b0:38:53:47:ef:c3:13:1f:19:a6:22:77:
f4:97:b7:8b:15:a7:dd:36:0f:a7:26:be:d2:61:90:cd:d1:2e:
5e:0c:78:1b:4e:25:7e:46:01:aa:5a:ce:9a:4c:c4:2c:05:1b:
bf:81:23:b6:1d:c6:1f:6b:45:20:9c:e1:17:cd:3a:60:ca:f0:
21:e3:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:42 2026 by rpki-client